Trusted Community Marketplace
Loading experience8%
Move cursor to tilt in 3D • Tap parcel to bounceTRUZH is built around trust, and trust starts with how we handle your data. This page summarises our practices in plain language; the legal clauses for this domain are set out in full below.
Last updated: 26 September 2026 · European Union · Framework: EU General Data Protection Regulation (GDPR)
Everything we do with your data follows these commitments.
Manage notifications, personalisation and consent from your TRUZH account at any time.
Encrypted connections, access controls and regular security reviews protect your data at every layer.
We collect data only where it is necessary. When it is no longer needed, we delete or anonymise it.
H. M. Waqas Badar, acting as a natural person and established in Valencia, Spain, is the controller of personal data processed through truzh.eu. Data protection enquiries are received at privacy@truzh.com.
The operator's main establishment is in Spain, so the Agencia Española de Protección de Datos is the lead supervisory authority under Article 56 GDPR. This does not narrow any User's rights: a User may lodge a complaint with the supervisory authority of their own Member State of residence or place of work under Article 77 GDPR, which will transmit it to the lead authority.
General enquiries
contact@truzh.comData protection
privacy@truzh.comLegal name
TRUZH
Address
Calle República Argentina 3 P05 Pta029, 46021 Valencia, Comunitat Valenciana, Spain
We collect only the data necessary to operate the marketplace and provide our services to you.
name, email address, profile photograph, preferences, phone number (optional)
institutional email domain
photographs, descriptions, prices, item condition
Messages exchanged through the in-app chat system
Support requests and correspondence
Transaction and reservation activity
IP address, browser type, operating system, timestamps
Usage analytics and interaction data
Geolocation data, where location features are enabled by the User
TRUZH does not process payments. Buyers and sellers settle payment directly between themselves, so TRUZH never receives your card or bank details.
Every processing activity is based on one of the legal grounds in Article 6 GDPR:
| Purpose | Legal basis | Reference |
|---|---|---|
| Creating and administering User accounts | Performance of a contract | Art. 6(1)(b) GDPR |
| Operating listings, chat, and marketplace functionality | Performance of a contract | Art. 6(1)(b) GDPR |
| Community verification through institutional email domain | Performance of a contract | Art. 6(1)(b) GDPR |
| Platform security, fraud prevention, and content moderation | Legitimate interests | Art. 6(1)(f) GDPR |
| Support and dispute resolution | Legitimate interests | Art. 6(1)(f) GDPR |
| Analytics and personalisation | Consent | Art. 6(1)(a) GDPR |
| Tax reporting under DAC7, should the obligation arise | Legal obligation | Art. 6(1)(c) GDPR |
We do not sell your personal data.
We share data only with the service providers below, which process it on our behalf under written agreements, and with public authorities where the law requires it:
Hostinger (servers) and Cloudflare (content delivery, security and approximate location from your connection).
Google Firebase (account sign-in), Brevo (transactional email) and Meta WhatsApp (phone verification codes, only if you add a phone number).
Cloudinary (listing and profile images) and Microsoft Azure AI (automated screening of listings and images for prohibited content).
Google Maps and OpenStreetMap (maps on delivery pages) and Google Translate (page and message translation when used).
Google AdSense (serves contextual and personalised ads based on your prior visits to this and other websites; uses cookies and web beacons). You can opt out of personalised advertising at Google Ads Settings (https://adssettings.google.com) or www.aboutads.info.
Courts, police or regulators, only where we are legally required to disclose data.
None today. TRUZH does not process payments; if online payments are introduced, the provider will be named here beforehand.
We use cookies and similar technologies that are needed to run TRUZH and, with your consent, to serve relevant advertisements. You control any optional ones.
Users located in the European Economic Area, or in a jurisdiction affording equivalent protection, hold rights of access, rectification, erasure, restriction of processing, objection, and data portability, together with the right to withdraw consent at any time without affecting the lawfulness of prior processing. Requests are addressed to privacy@truzh.com and answered within one month.
Obtain a copy of the personal data we hold about you.
Have inaccurate or incomplete data corrected.
Have your data deleted where the law allows.
Limit how we process your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on our legitimate interests.
Withdraw consent at any time, without affecting earlier processing.
To exercise any of these rights, write to privacy@truzh.com
Users additionally hold the right to lodge a complaint with a supervisory authority. The competent authority for the operator is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.
When data is no longer needed, it is securely deleted or anonymised.
Personal data is processed principally within the European Economic Area. Where a transfer outside the EEA is necessary, it is made on the basis of an adequacy decision or under Standard Contractual Clauses adopted by the European Commission, supported by a transfer impact assessment.
We use encryption in transit, role-based access controls, regular security reviews and incident-response procedures. No system is completely secure; if you suspect a problem, contact privacy@truzh.com immediately.
TRUZH uses automated systems to help detect fraud, screen listings and images for prohibited content, and order search results. These systems support, but do not replace, human judgement. We do not take decisions based solely on automated processing that produce legal or similarly significant effects for you.
If an automated system contributes to a moderation decision about your account or listing, you can ask for a human review at privacy@truzh.com.
The Platform is intended for persons aged 18 and over. Personal data is not knowingly collected from minors. Where the operator becomes aware that a minor has registered, the account is suspended and the associated data deleted without undue delay.
We may update this Privacy Policy to reflect changes in our services, technology or the law. We will tell you about material changes by email or by a prominent notice on the platform before they take effect. The date at the top of this page shows the current version.
Write to us with any privacy question, request or concern.
General enquiries: contact@truzh.com